Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
00dc824e690d5245ca6bbef4b6c22e63_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00dc824e690d5245ca6bbef4b6c22e63_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
00dc824e690d5245ca6bbef4b6c22e63_JaffaCakes118
Size
205KB
MD5
00dc824e690d5245ca6bbef4b6c22e63
SHA1
75f58328b44431ee0843afc391dec5d2e91941f7
SHA256
b334b4c1535e70283910376a645326e7870c9d3e171df64d2db8e3f81308a1b0
SHA512
8985edb89b449a8e8bd0fbe701368de5b1ba5a39bac1652f65b320cda93881e13ec6cf4968e94d12824a98a2b100b4e7abe73146a93885a9edc4f2789d6c2031
SSDEEP
6144:C0yXtBZbJGMwZdH96WSREd+Y/acdBZBA371X1oJyQ:C0y9Bu3d9mEQY/rL43ZsL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ